Elastic Windows Event Explorer


Publisher - Microsoft-Windows-Remotefs-Rdbss

Event ID 30007

Message:

Acquire Fcb: RxContext %{RxContext} Fcb %{Fcb} Mode %{Mode}

Event Data:

# Name In Type
Out Type
1 RxContext win:Pointer win:HexInt64
2 Fcb win:Pointer win:HexInt64
3 Mode win:UInt32 xs:unsignedInt

Observed Windows Versions:

Version: 0

Fingerprint: XBX3NDEQTK7B2